$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft File: SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft (raw, json) Hash identifier: j1KNxqHRxIO6EaDQeb+r4Vq1U0ivwAI/0VRd8CQuSxw= Subject key identifier: 65:15:C2:96:36:F1:0B:EF:B1:78:9B:0C:63:57:59:F0:A2:EC:E8:80 Authority key identifier: 49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F Certificate issuer: /CN=A91BC4FF/serialNumber=49475B5975F1979895A3C6E44183E4BCA2E8346F Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft Manifest number: 69 Signing time: Mon 21 Apr 2025 05:46:06 +0000 Manifest this update: Mon 21 Apr 2025 05:46:05 +0000 Manifest next update: Mon 28 Apr 2025 05:46:05 +0000 Files and hashes: 1: SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl (hash: YdIQpQnHSxfYCrFVn2XWiyrYxuvkEufunXDKp/zSVfE=) 2: 35525B92845611EFB053C341C4F9AE02.roa (hash: EALyqga77JnqqbNDgpUBBYz9RBMX9a1r4uv6AF60WLk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 05:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC4FF, serialNumber=49475B5975F1979895A3C6E44183E4BCA2E8346F Validity Not Before: Apr 21 05:46:05 2025 GMT Not After : Apr 28 05:46:05 2025 GMT Subject: CN=6805db9e-720f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:46:df:e1:a1:7b:7e:09:8d:e6:b4:b6:5b:29: 1b:58:f3:15:7e:e7:a0:17:66:11:01:09:91:84:91: 5b:98:3f:47:ef:55:ae:a2:72:8e:6d:7c:7e:98:40: 41:e5:06:42:0f:4b:f9:a1:84:3c:06:c4:b1:5d:91: 16:43:92:4e:78:9f:35:29:fc:98:92:24:7f:be:09: 12:43:1d:b1:ed:a0:6d:d9:89:f8:80:3e:fb:a6:d8: e0:36:3c:08:a6:1b:67:5a:ee:87:9e:f8:1e:e3:4d: 8e:9c:ad:22:37:f2:a1:f9:a4:bc:ea:0c:6d:4c:56: 2b:f1:f7:b3:ac:10:29:0a:05:dd:4a:2e:64:a1:c7: b5:96:1f:a2:5b:60:3f:b3:1e:cb:8a:04:c7:13:65: 9e:92:0a:86:2b:c5:32:61:e5:10:8a:f0:18:47:fa: 15:65:f2:95:80:92:a2:4c:74:3d:99:55:de:9f:25: 66:be:54:12:b0:64:20:4a:a9:af:91:56:03:3d:57: 21:8d:4e:15:e2:bb:eb:83:31:a4:f8:58:b7:b8:10: 38:43:04:f5:9f:74:5c:72:1f:de:07:b1:25:2e:b8: d3:6d:0f:af:9f:3f:f5:ae:3e:49:32:b0:97:b8:55: ab:0e:f7:7b:cb:68:63:9d:68:c0:48:cf:67:61:d7: 6c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:15:C2:96:36:F1:0B:EF:B1:78:9B:0C:63:57:59:F0:A2:EC:E8:80 X509v3 Authority Key Identifier: keyid:49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:03:e3:f1:01:a8:6b:4f:27:74:f4:50:fe:41:79:2f:b0:65: 55:ca:99:82:18:f8:21:99:63:c4:94:a6:75:5c:01:17:8b:84: 7f:e1:2c:6e:a3:c6:25:9e:eb:30:27:ff:5c:7b:28:4d:0b:8a: 12:1a:4a:b0:09:64:35:ef:e8:1f:68:07:5c:df:d5:aa:6a:b9: e3:6a:16:e9:9f:fa:c8:48:3b:96:51:4f:b0:ef:c7:ca:5b:5f: 38:cc:47:db:2a:47:c7:5f:73:18:77:bf:44:81:35:f9:bf:92: f7:ff:29:1b:5b:a0:74:63:34:ea:5e:0c:b4:74:78:b0:3f:d3: c9:cd:72:9a:d6:78:17:17:34:57:3b:24:49:57:89:65:00:29: e6:a2:67:4d:05:05:41:a0:9a:a5:21:4b:26:21:9a:a9:e5:f5: 78:7d:a2:2f:29:9b:b8:0b:23:85:25:3c:8b:6e:ce:34:24:92: b4:e4:30:24:9a:85:61:5c:83:85:92:53:fb:b1:20:c8:67:20: 06:96:21:bd:48:68:ab:de:9d:7a:e4:fa:ba:23:14:9f:51:ad: 31:4c:79:76:c8:6b:7b:4a:b8:86:11:2e:42:2e:aa:b3:7c:a1: f6:80:49:2b:08:be:1d:a8:f4:b8:a6:3c:e9:ef:28:6d:5a:67: e8:99:5f:9f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QzRGRjExMC8GA1UEBRMoNDk0NzVCNTk3NUYxOTc5ODk1QTNDNkU0NDE4M0U0QkNB MkU4MzQ2RjAeFw0yNTA0MjEwNTQ2MDVaFw0yNTA0MjgwNTQ2MDVaMBgxFjAUBgNV BAMTDTY4MDVkYjllLTcyMGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3Rt/hoXt+CY3mtLZbKRtY8xV+56AXZhEBCZGEkVuYP0fvVa6ico5tfH6YQEHl BkIPS/mhhDwGxLFdkRZDkk54nzUp/JiSJH++CRJDHbHtoG3ZifiAPvum2OA2PAim G2da7oee+B7jTY6crSI38qH5pLzqDG1MVivx97OsECkKBd1KLmShx7WWH6JbYD+z HsuKBMcTZZ6SCoYrxTJh5RCK8BhH+hVl8pWAkqJMdD2ZVd6fJWa+VBKwZCBKqa+R VgM9VyGNThXiu+uDMaT4WLe4EDhDBPWfdFxyH94HsSUuuNNtD6+fP/WuPkkysJe4 VasO93vLaGOdaMBIz2dh12yPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZRXCljbx C++xeJsMY1dZ8KLs6IAwHwYDVR0jBBgwFoAUSUdbWXXxl5iVo8bkQYPkvKLoNG8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJDNEZGLzlDNTZCRTQyODQ1 NTExRUZCNzZEMjc0MEM0RjlBRTAyL1NVZGJXWFh4bDVpVm84YmtRWVBrdktMb05H OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU1VkYldYWHhsNWlWbzhia1FZUGt2S0xvTkc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJD NEZGLzlDNTZCRTQyODQ1NTExRUZCNzZEMjc0MEM0RjlBRTAyL1NVZGJXWFh4bDVp Vm84YmtRWVBrdktMb05HOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA4D4/EBqGtPJ3T0UP5BeS+wZVXKmYIY+CGZY8SUpnVcAReLhH/hLG6j xiWe6zAn/1x7KE0LihIaSrAJZDXv6B9oB1zf1apqueNqFumf+shIO5ZRT7Dvx8pb XzjMR9sqR8dfcxh3v0SBNfm/kvf/KRtboHRjNOpeDLR0eLA/08nNcprWeBcXNFc7 JElXiWUAKeaiZ00FBUGgmqUhSyYhmqnl9Xh9oi8pm7gLI4UlPItuzjQkkrTkMCSa hWFcg4WSU/uxIMhnIAaWIb1IaKvenXrk+rojFJ9RrTFMeXbIa3tKuIYRLkIuqrN8 ofaASSsIvh2o9LimPOnvKG1aZ+iZX58= -----END CERTIFICATE-----Generated at Tue Apr 22 16:38:23 2025 by rpki-client